Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Not expensive considering its usefulness”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
09ad625d63922fbaa0aa147928d460daa7e2d081558656dffbb168633cc04146
Signature (Ed25519, base64)
ADoTXAapFjRBvNbiPwV4pI2WZXbdcJTna0eT1QyHOL1l2a3e/3IVgI1BghT+1Fwso7CcSmYA/XVvKiETEc9QAg==
Merkle root
7c31845ea005068c52611e47ff2778bff3790bf9c71538767447b45fe79322da
Merkle path
["09a6cbc458a55b84a5ce05d76c5e0aa456a0cf3f9f6f241aafd720bf3254c7b8","8d8a447fee7c15c20a7714a6834f630bb50223a43fe1030d8ffc38fe1c306b79","6d2313bb8ab8d3f0a63fc50f3803433d2a5b35cbb11c0fb642c14c623c567707","c33dc8a86b34f363202a407d11a6499e7e06c05c7920f04375985369c06767e9","e5a3fde121bb7716cbe57e17cc171a9bae1058e4eaa40d13785b03e9d495a541","4199005d8357bb10bd0bda551800c1d3f467367636186747aeef5abc43b6756a","db57411f409959c710d84eb642b4fa710ef1b35c8b5ac870178a5022cab15f34","313cd9a325f4a4c8e0e320a57d88244c64e251610b8676044ca0db43a205ab55","4be92aa2412dea7b04e3d2f43664273027a86a4d69dcc48046a9c988763c0db3","112798e60cbe649360bf0e691d77f14be3e25c5d9e456f9b064d266ef78976e9","d725721ef4e46a74ffa33a5b3eaf5461c6d90eaf7c1f1f95e9c66dcb49eb98e3","6ceae28d9d9991c7f0978d9583675f513d5a8b980f19419645347989922bda23","de406c010b9d09d7f74176c9d423f8d72b745ac400e2c0cfcdb434d0af8fcade","e49018058753e3439518d8ba4c827c0b343729e39fb424281e6808f61fcc629a","4f862010adf0fcb97b6b2b8112f782a485805bae9f9783a7b39739616b9b62e0"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657817117 · entry 108e9186e8c5677ad3ca…
Expected log hash
0666b5f97f085fdfc4cedfba58ac7e76857cdc9faa5a1032ef597cdb93024c5a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788148095319","kind":"published-quote","locale":"en","page":"theme:proton/price/en","quote":"Not expensive considering its usefulness","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7c31845ea005…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.